CVE-2018-16629: Intelliants Subrion CMS

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

panel/uploads/#elf_l1_XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element.

Affected products

• Intelliants Subrion CMS: version 4.2.1 only

Published 2018-12-04. Last modified 2026-06-17.